Scan Methods Parent topic

OfficeScan agents can use one of two scan methods when scanning for security threats.
  • Smart scan: OfficeScan agents that use smart scan are referred to as smart scan agents in this document. Smart scan agents benefit from local scans and in-the-cloud queries provided by File Reputation Services.
  • Conventional scan: OfficeScan agents that do not use smart scan are referred to as conventional scan agents. A conventional scan agent stores all components on the endpoint and scans all files locally.
The following table provides a comparison between the two scan methods.

Conventional Scan and Smart Scan Compared

Basis of Comparison
Conventional Scan
Smart Scan
Availability
Available in this and all earlier OfficeScan versions
Available starting in OfficeScan 10.0
Scanning behavior
The conventional scan OfficeScan agent performs scanning on the endpoint.
  • The smart scan agent performs scanning on the endpoint.
  • If the OfficeScan agent cannot determine the risk of the file during the scan, the OfficeScan agent verifies the risk by sending a scan query to the Scan Server (for OfficeScan agents connected to the OfficeScan server) or the Trend Micro Smart Protection Network (for OfficeScan agents disconnected from the OfficeScan server).
  • The OfficeScan agent "caches" the scan query result to improve the scan performance.
Components in use and updated
All OfficeScan agent components available on the update source, except the Smart Scan Agent Pattern
All components available on the update source, except the Virus Pattern
Typical update source
OfficeScan server
OfficeScan server